infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Improve run-on sentences.

unstable
sinn3r 2012-05-17 15:00:00 -05:00
parent 32a0596a03
commit c0d17734ed
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
modules/exploits/windows/http/bea_weblogic_post_bof.rb
View File

@ -22,14 +22,12 @@ class Metasploit3 < Msf::Exploit::Remote
Weblogic Apache plugin. Weblogic Apache plugin.
The connector fails to properly handle specially crafted HTTP POST The connector fails to properly handle specially crafted HTTP POST
requests resulting in a buffer overflow due to the insecure usage requests, resulting a buffer overflow due to the insecure usage
of sprintf. of sprintf. Currently, this module works over Windows systems without DEP,
The Weblogic Apache plugin version is fingerprinted with a POST
request containing a specially crafted Transfer-Encoding header.
At this moment this module works over Windows systems without DEP
and has been tested with Windows 2000 / XP. and has been tested with Windows 2000 / XP.
In addition, the Weblogic Apache plugin version is fingerprinted with a POST
request containing a specially crafted Transfer-Encoding header.
}, },
'Author' => 'Author' =>
[ [
@ -92,7 +90,7 @@ class Metasploit3 < Msf::Exploit::Remote
res = send_request_cgi({ res = send_request_cgi({
'method' => 'POST', 'method' => 'POST',
'uri' => target_uri.path, 'uri' => target_uri.path,
'headers' => 'headers' =>
{ {
'Transfer-Encoding' => my_data 'Transfer-Encoding' => my_data
}, },